Security Controls & Resilience Archives

Security vulnerabilities: Find them before they embarrass you

Despite many of the disruptions caused by COVID-19 over the last 12 months it remains vital that organisations maintain their cyber security governance. Maintaining security defences and avoiding security vulnerabilities will hopefully prevent the unwelcome...

Improved Cyber Hygiene – A key part of new APRA Strategy

Too many boards still lack visibility or understanding of the problems, while internal audit functions can lack the specialist skills to challenge boards and management to plug urgent gaps. Geoff Summerhayes, APRA Executive Board Member

Cyber Risk: Problems with using browser and OS versions to measure it

One of the challenges in cyber security is how to measure the status of security controls to quantify cyber risk - even controls that should be ubiquitous, baseline and foundational. This problem has a number of dimensions – for example when looking...

Netlogon vulnerability – The Essential Eight can save the day

A recently discovered vulnerability in Microsoft’s Netlogon authentication protocol (CVE-2020-1472) allows attackers to establish a vulnerable Netlogon secure channel connection to a domain controller. If an attacker successfully exploits this vulnerability,...

Incident Response using MITRE ATTACK

This blog looks at how the MITRE ATT&CK matrix can be used to complement the work of your incident response team in the Security Operations Centre (SOC). It explores how it can help incident responders structure and streamline their investigations. ...

Refocus from Network Security to Endpoint Security Strategy

The perfect cyber security storm that COVID-19 created has ushered in new cyber security operating models for many businesses. Many organisations are now switching focus from network security risk to endpoint security as a result of the move to working...

Multi Level Threat Modelling using MITRE ATT&CK

Cyber security teams use threat modelling to represent sets of adversary tactics and techniques that may be used to a compromise their computer systems. These threat models contain representations of the ICT systems, networks and applications, combined...

MITRE ATT&CK and MSSPs: How useful is it to service providers?

The MITRE ATT&CK Framework of tactics and techniques used by attackers to probe and compromise systems is attracting a lot of attention. We’ve covered it in several blogs posts here, here and here. But is it just a framework for enterprises to...

Australian cyber security 2020 – right strategy, wrong plan

There’s a lot of discussion about Australian cyber security right now, AustCyber has just released the Australian Digital Trust Report 2020, the Australian Cyber Security Industry Advisory Panel report will shortly hand down its recommendations to Government. ...

Defend against APTs with MITRE ATTACK

The MITRE ATT&CK framework is a resource that security operations centre (SOC) teams can use to refine their detection rules against known attack profiles. Using ATT&CK allows them to build specific targeted defences against advanced persistent...